Exper EWM-01 ADSL/MODEM – DNS Change
#!/bin/bash
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Contrexx CMS egov Module 1.0.0 – SQL Injection
# Exploit Title: Contrexx CMS:egov moudle SQL injection
wdCalendar 2 – SQL Injection
# Exploit Title: wdcalendar version 2 sql injection vulnerability
Cherry Music 0.35.1 – Arbitrary File Disclosure
# Exploit Title: Cherry Music v0.35.1 directory traversal vulnerability allows authenticated users to download arbitr...
Airmail 3.0.2 – Cross-Site Scripting
Airmail is a popular email client on iOS and OS X.
Vodafone Mobile Wifi – Reset Admin Password
import urllib2
Zabbix 2.0 < 3.0.3 - SQL Injection
# Exploit Title: 2.0 < Zabbix < 3.0.4 SQL Injection Python PoC
Jobberbase 2.0 – Multiple Vulnerabilities
Jobberbase: http://www.jobberbase.com/
FreePBX 13.0.x < 13.0.154 - Remote Command Execution
Vulnerable software : Freepbx
CumulusClips 2.4.1 – Multiple Vulnerabilities
# Exploit Title: CumulusClips Session fixation
PHPIPAM 1.2.1 – Multiple Vulnerabilities
PHPIPAM 1.2.1 Multiple Vulnerabilities
WordPress Plugin RB Agency 2.4.7 – Local File Disclosure
######################
Belkin F9K1122v1 1.00.30 – Buffer Overflow (via Cross-Site Request Forgery)
import socket, sys , base64, struct, string, urllib
ZKTeco ZKBioSecurity 3.0 – ‘visLogin.jsp’ Local Authentication Bypass
ZKTeco ZKBioSecurity 3.0 (visLogin.jsp) Local Authorization Bypass
ZKTeco ZKBioSecurity 3.0 – Directory Traversal
ZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulnerability
ZKTeco ZKBioSecurity 3.0 – Hard-Coded Credentials SYSTEM Remote Code Execution
ZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote SYSTEM Code Execution
RSS News AutoPilot Script 1.0.1/3.0.3 – Cross-Site Request Forgery
# Exploit Title: RSS News AutoPilot Script 1.0.1 / 3.0.3 - CSRF to
FreePBX 13.0.35 – SQL Injection
Vulnerable software : Freepbx
PLC Wireless Router GPN2.4P21-C-CN – Arbitrary File Disclosure
# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Authorised Arbitrary File Disclosure
FreePBX 13.0.35 – Remote Command Execution
Vulnerable software : Freepbx
CubeCart < 3.0.12 - Multiple Vulnerabilities
CubeCart Multiple Vulnerabilities
WordPress Plugin CYSTEME Finder 1.3 – Arbitrary File Disclosure/Arbitrary File Upload
Exploit Title: WordPress CYSTEME Finder Plugin 1.3 - Arbitrary File Dislcosure/Arbitrary File Upload
chatNow – Multiple Vulnerabilities
# Exploit Title: chatNow - Multiple Vulnerabilities
SimplePHPQuiz – Blind SQL Injection
# Exploit Title: SimplePHPQuiz - Blind SQL Injection
WordPress Plugin Mail Masta 1.0 – Local File Inclusion
[+] Date: [23-8-2016]
WordPress Core 4.5.3 – Directory Traversal / Denial of Service
Path traversal vulnerability in WordPress Core Ajax handlers
Sakai 10.7 – Multiple Vulnerabilities
Sakai 10.7 Multiple Vulnerabilities
Ocomon 2.0 – SQL Injection
# Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql
Honeywell IP-Camera HICC-1100PT – Local File Disclosure
1. Advisory Information
JVC IP-Camera VN-T216VPRU – Local File Disclosure
1. Advisory Information
Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR – Local File Disclosure
1. Advisory Information
tcPbX – ‘tcpbx_lang’ Local File Inclusion
Vulnerable hardware : tcpbx voip distro
Fortigate Firewalls – ‘EGREGIOUSBLUNDER’ Remote Code Execution
# Exploit Title: Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
TOPSEC Firewalls – ‘ELIGIBLEBOMBSHELL’ Remote Code Execution
# Exploit Title: TOPSEC Firewalls - Remote Code Execution (ELIGIBLEBOMBSHELL)
TOPSEC Firewalls – ‘ELIGIBLECANDIDATE’ Remote Code Execution
# Exploit Title: TOPSEC Firewalls - Remote Code Execution (ELIGIBLECANDIDATE)
TOPSEC Firewalls – ‘ELIGIBLECONTESTANT’ Remote Code Execution
# Exploit Title: TOPSEC Firewalls - Remote Code Execution (ELIGIBLECONTESTANT)
ZYCOO IP Phone System – Remote Command Execution
Vulnerable hardware : ZYCOO IP phone system
JVC IP-Camera VN-T216VPRU – Credentials Disclosure
1. Advisory Information
Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR – Credentials Disclosure
1. Advisory Information